Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7401338b-0c79-3f6f-ac44-3f12442f06ad.roa
File:                     7401338b-0c79-3f6f-ac44-3f12442f06ad.roa (raw, json)
Hash identifier:          /6VMj3iCMtWakqI/vKt/tkq23I9SSKntPsY/2IOHIbo=
Subject key identifier:   40:28:7E:88:1A:77:A7:B5:9D:D0:EF:75:31:F4:E6:C7:6F:D1:B7:06
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B4FDC75E8B40AA28076D2C400
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7401338b-0c79-3f6f-ac44-3f12442f06ad.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     3477
IP address blocks:        198.180.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:75:e8:b4:0a:a2:80:76:d2:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=710c98ba-06f5-4001-a4d0-a2cbd66279d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:39:82:17:4b:e4:09:0b:6b:33:37:61:fc:
                    09:fa:ea:05:77:8e:34:2e:f5:3c:ce:ce:f0:e2:0b:
                    66:dc:20:0c:01:2c:59:8b:48:15:05:55:68:4b:45:
                    33:3e:4d:6b:c3:b6:38:18:c4:e1:7b:29:6d:f1:eb:
                    04:b1:e0:4e:c8:ef:51:72:35:00:72:30:04:b4:cb:
                    81:19:84:f9:aa:c4:6b:ff:2c:58:1b:4b:60:cd:3a:
                    aa:0d:6b:21:fb:4b:51:b4:89:f9:34:61:45:2a:2c:
                    2a:24:f8:21:bc:f9:10:ce:b5:ec:e1:81:f5:6e:41:
                    50:30:ea:35:7b:13:96:50:58:3e:89:61:4c:6f:92:
                    e7:91:5a:ae:9d:18:a8:c1:79:95:b6:93:9f:e9:37:
                    62:f3:d5:d8:27:83:4f:58:ea:52:f5:30:d1:65:d5:
                    c5:89:d2:a5:8a:b3:cc:8a:26:8b:64:81:59:86:7e:
                    eb:9f:1f:df:24:1a:35:79:0b:e2:99:57:bb:af:fa:
                    b6:fb:e7:66:f4:ad:4e:5c:7a:53:c8:f8:3b:bd:ac:
                    7c:ac:11:74:aa:84:15:aa:e0:91:f6:bd:4d:da:76:
                    2d:a0:b5:f0:69:a7:86:be:f5:c4:5a:34:7d:23:ce:
                    64:08:7d:a9:74:b3:10:72:39:0b:fe:d1:41:ca:b5:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:7E:88:1A:77:A7:B5:9D:D0:EF:75:31:F4:E6:C7:6F:D1:B7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7401338b-0c79-3f6f-ac44-3f12442f06ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:a5:15:1e:48:30:91:b7:59:e0:a3:73:61:0b:77:7e:19:
         85:0f:1c:f6:d1:52:4d:29:0f:8d:a6:57:50:39:88:16:0f:1f:
         f0:23:62:a8:2b:a3:bc:53:e3:dd:57:97:b9:58:66:84:ea:fe:
         b1:9a:c3:75:1e:5f:f6:cb:c7:4e:56:a7:9c:e8:8a:30:cc:18:
         d6:da:e4:56:6f:fa:30:9f:b9:de:b3:47:5d:9b:0c:3e:51:2c:
         97:46:4e:db:e1:cb:54:f8:16:30:56:22:d1:8f:ed:b0:e1:1a:
         6f:13:e4:70:9f:02:df:b8:ab:13:c1:0e:10:d6:07:3f:46:69:
         ff:a4:46:6e:06:d6:97:e6:8b:f6:05:08:5e:ce:f9:e3:83:2c:
         ca:21:88:a0:2c:0b:5a:22:ed:40:61:51:ba:af:5f:df:29:11:
         56:fd:1a:40:d7:48:cb:2a:a9:75:a1:44:60:26:68:3b:c1:6a:
         c8:6a:24:8b:2c:fe:34:f0:fc:e3:59:1e:39:49:82:58:e2:0b:
         5a:0b:ea:64:26:39:51:b3:99:94:88:f8:0a:9c:3e:d0:b0:41:
         64:f6:dd:ec:f4:03:a2:01:96:67:c2:00:03:05:12:67:ab:4d:
         93:94:42:2e:0c:da:24:2c:65:f9:e2:fa:14:f7:f3:1b:ac:43:
         37:6d:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:13 2025 by rpki-client